CVE-2024-38996

2024-07-0100:00:00

mitre

www.cve.org

ag-grid-community

ag-grid-enterprise

prototype pollution

arbitrary code execution

dos

cve-2024-38996

0.0004 Low

EPSS

Percentile

15.8%

JSON

ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.